ATENTION‼ New - CVE-2013-7203
📖 Read
via "National Vulnerability Database".
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2013-4451
📖 Read
via "National Vulnerability Database".
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.📖 Read
via "National Vulnerability Database".
🕴 Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware 🕴
📖 Read
via "Dark Reading: ".
Attack against the Metropolitan Police Department was disrupted before malware could be sent to additional systems.📖 Read
via "Dark Reading: ".
Darkreading
Romanian Hacker Pleads Guilty for Role in Inauguration Surveillance Ransomware
Attack against the Metropolitan Police Department was disrupted before malware could be sent to additional systems.
❌ Delphi Packer Looks for Human Behavior Before Deploying Payload ❌
📖 Read
via "The first stop for security news | Threatpost ".
Many different threat actors are using this crypting service/tool for their operations, possibly buying it from the developer itself.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Delphi Packer Looks for Human Behavior Before Deploying Payload
Many different threat actors are using this crypting service/tool for their operations, possibly buying it from the developer itself.
❌ Twitter Flaw Exposed Direct Messages To External Developers ❌
📖 Read
via "The first stop for security news | Threatpost ".
The company said it has issued a patch for the issue, which has been ongoing since May 2017.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Twitter Flaw Exposed Direct Messages To External Developers
The company said it has issued a patch for the issue, which has been ongoing since May 2017.
🔐 10 signs you aren't cut out to be a cybersecurity specialist 🔐
📖 Read
via "Security on TechRepublic".
A career as a cybersecurity specialist requires more than just technical skills. Cybersecurity professionals also tend to have specific personalities. Do you qualify?📖 Read
via "Security on TechRepublic".
TechRepublic
10 signs you may not be cut out for a cybersecurity job
A career as a cybersecurity specialist requires more than just technical skills. Cybersecurity professionals also tend to have specific personalities. Do you qualify?
🔐 10 signs you aren't cut out to be a cybersecurity specialist 🔐
📖 Read
via "Security on TechRepublic".
A career as a cybersecurity specialist requires more than just technical skills. Cybersecurity professionals also tend to have specific personalities. Do you qualify?📖 Read
via "Security on TechRepublic".
TechRepublic
10 signs you may not be cut out for a cybersecurity job
A career as a cybersecurity specialist requires more than just technical skills. Cybersecurity professionals also tend to have specific personalities. Do you qualify?
🕴 The 'Opsec Fail' That Helped Unmask a North Korean State Hacker 🕴
📖 Read
via "Dark Reading: ".
How Park Jin Hyok - charged by the US government for alleged computer crimes for the Sony, Bank of Bangladesh, WannaCry cyberattacks - inadvertently blew his cover via email accounts.📖 Read
via "Dark Reading: ".
Dark Reading
The 'Opsec Fail' That Helped Unmask a North Korean State Hacker
How Park Jin Hyok - charged by the US government for alleged computer crimes for the Sony, Bank of Bangladesh, WannaCry cyberattacks - inadvertently blew his cover via email accounts.
❌ Critical Vulnerability Found in Cisco Video Surveillance Manager ❌
📖 Read
via "The first stop for security news | Threatpost ".
Cisco has patched vulnerability in its video surveillance manager software that could give an unauthenticated, remote attacker the ability to execute arbitrary commands on targeted systems.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Critical Vulnerability Found in Cisco Video Surveillance Manager
Cisco has patched vulnerability in its video surveillance manager software that could give an unauthenticated, remote attacker the ability to execute arbitrary commands on targeted systems.
🔐 ProTip: Automate setting a firmware password on Apple computers 🔐
📖 Read
via "Security on TechRepublic".
Securing Mac computers means more than just protecting the data. Limiting the ways a user can gain access to a device--including bypassing the existing OS or resetting account passwords is easily enabled with a simple command.📖 Read
via "Security on TechRepublic".
TechRepublic
How to automate setting a firmware password on Apple computers
Securing Mac computers means more than just protecting the data--limiting how a user can gain access to a device is easy to enable with a simple command.
❌ Podcast: Two Billion IoT Devices Still Vulnerable to BlueBorne Bug ❌
📖 Read
via "The first stop for security news | Threatpost ".
Up to two billion devices are still vulnerable to the BlueBorne IoT attack - and may not ever get a patch.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Podcast: Two Billion IoT Devices Still Vulnerable to BlueBorne Bug
Up to two billion devices are still vulnerable to the BlueBorne IoT attack - and may not ever get a patch.
⚠ Monday review – the hot 19 stories of the week ⚠
📖 Read
via "Naked Security".
From iOS security updates to Netflix phishing attacks, catch up with everything we've written in the last seven days - it's weekly roundup time.📖 Read
via "Naked Security".
Naked Security
Monday review – the hot 19 stories of the week
From iOS security updates to Netflix phishing attacks, catch up with everything we’ve written in the last seven days – it’s weekly roundup time.
⚠ iTunes is assigning you a ‘trust score’ based on emails and phone calls ⚠
📖 Read
via "Naked Security".
It's just a number to detect fraud, not a Black Mirror-esque score that's going to rate us all as social misfits unworthy of wedding invitations.📖 Read
via "Naked Security".
Naked Security
iTunes is assigning you a ‘trust score’ based on emails and phone calls
It’s just a number to detect fraud, not a Black Mirror-esque score that’s going to rate us all as social misfits unworthy of wedding invitations.
⚠ Police accidentally tweet bookmarks that reveal surveilled groups ⚠
📖 Read
via "Naked Security".
The Massachusetts State Police (MSP) accidentally spilled some of its opsec onto Twitter last week, uploading a screenshot that revealed browser bookmarks.📖 Read
via "Naked Security".
Naked Security
Police accidentally tweet bookmarks that reveal surveilled groups
The Massachusetts State Police (MSP) accidentally spilled some of its opsec onto Twitter last week, uploading a screenshot that revealed browser bookmarks.
⚠ App developers are STILL allowed to read your Gmails ⚠
📖 Read
via "Naked Security".
Google is still allowing third-party developers access to access its users’ Gmail data, it said in a letter to Senators last week.📖 Read
via "Naked Security".
Naked Security
App developers are STILL allowed to read your Gmails
Google is still allowing third-party developers access to access its users’ Gmail data, it said in a letter to Senators last week.
⚠ Facebook faces sanctions if it drags its feet on data transparency ⚠
📖 Read
via "Naked Security".
The EU justice commissioner said she's out of patience. Also, she quit Facebook because it's a "channel of dirt."📖 Read
via "Naked Security".
Naked Security
Facebook faces sanctions if it drags its feet on data transparency
The EU justice commissioner said she’s out of patience. Also, she quit Facebook because it’s a “channel of dirt.”
⚠ Bankrupt NCIX customer data resold on Craigslist ⚠
📖 Read
via "Naked Security".
What happens to sensitive customer data when a large company that has collected it over many years suddenly goes bust?📖 Read
via "Naked Security".
Naked Security
Bankrupt NCIX customer data resold on Craigslist
What happens to sensitive customer data when a large company that has collected it over many years suddenly goes bust?
🔐 Will Microsoft finally kill the password with its Authenticator upgrade? 🔐
📖 Read
via "Security on TechRepublic".
Microsoft has extended its support for passwordless login using the app to the hundreds of thousands of Azure Active Directory-connected apps used by business, one of a series of security improvements announced at Ignite.📖 Read
via "Security on TechRepublic".
❌ Tricky DoS Attack Crashes Mozilla Firefox ❌
📖 Read
via "The first stop for security news | Threatpost ".
There are currently no mitigations for the Firefox attack, a researcher told Threatpost.📖 Read
via "The first stop for security news | Threatpost ".
Threat Post
Tricky DoS Attack Crashes Mozilla Firefox
There are currently no mitigations for the Firefox attack, a researcher told Threatpost.
🔐 Cisco: We've killed another critical hard-coded root password bug, patch urgently 🔐
📖 Read
via "Security on TechRepublic".
This time a 9.8/10-severity hardcoded password has been found in Cisco's video surveillance software.📖 Read
via "Security on TechRepublic".
TechRepublic
Cisco: We've killed another critical hard-coded root password bug, patch urgently
This time a 9.8/10-severity hardcoded password has been found in Cisco's video surveillance software.
🕴 Hacking Back: Simply a Bad Idea 🕴
📖 Read
via "Dark Reading: ".
While the concept may sound appealing, it's rife with drawbacks and dangers.📖 Read
via "Dark Reading: ".
Darkreading
Hacking Back: Simply a Bad Idea
While the concept may sound appealing, it's rife with drawbacks and dangers.